LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Closed Thread
  Search this Thread
Old 05-29-2009, 10:48 AM   #1
nbodorik
LQ Newbie
 
Registered: May 2009
Posts: 5

Rep: Reputation: 0
Systrace and application exploit problem! Help!


Is there anyone experienced with systrace who might be able to answer the follow question?!

I am looking to run an exploit under systrace. The exploit is a ctorrent exploit
and it is found at http://www.milw0rm.com/exploits/8470. ctorrent is a torrent
application and the exploit is a python script which coverts a torrent file to
a malicious torrent which, when run by ctorrent, causes a buffer overflow
attack and a Segmentation fault message appears. I have successfully run the
exploit using ctorrent and get the appropriate message, however, when I run it
using systrace while enforcing a policy I don't get the Segmentation fault
message, and I don't get any log errors, but a multitude of system calls are
being performed and the actions completes.

I have also changed the policy to remove permissions of a system call which the
exploit requires, and when run under systrace -a, it logs this error and an
error messages comes up saying the operation can not be performed. It seems to
me as if the action is taking place, however the Segmentation fault message
simply isn't being displayed... but this doesn't make sense to me...

Is there any information or help that you could provide me with to help me
conclude whether or not the exploit is being properly executed, and a message
just isn't being displayed?
 
Old 05-31-2009, 04:31 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Please post your thread in only one forum. Posting a single thread in the most relevant forum will make it easier for members to help you and will keep the discussion in one place. This thread will be closed because it is a duplicate of http://www.linuxquestions.org/questi...m-help-729332/.

* Next to that the question remains if this is an OP about getting the exploit to run or problems configuring systrace. The moment it is determined this is a thread about exploits it shall be closed. For an explanation see the LQ Rules.

Last edited by unSpawn; 05-31-2009 at 04:33 AM. Reason: clarity++
 
  


Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Problem in writing exploit code under linux ! *Mafia* Programming 11 03-25-2007 08:52 PM
LXer: Add an extra layer of security with systrace LXer Syndicated Linux News 0 01-25-2006 12:46 AM
What exploit is this? Boss Hoss Linux - Security 6 06-11-2004 07:16 PM
|more exploit Benamoz Linux - General 3 09-03-2003 05:59 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 07:08 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration